$ rpki-client -vvf rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft File: akoHTuW-fzuoULO6IUKWtlsaLa0.mft (raw, json) Hash identifier: ACvdp/vh/thns8l9703N5KVPlptINU5eP9ecfT7Jg0s= Subject key identifier: 55:DE:58:D6:E8:49:18:55:84:42:D4:3A:47:29:88:88:2C:5F:A9:23 Authority key identifier: 6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD Certificate issuer: /CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Certificate serial: 079B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft Manifest number: 078C Signing time: Sat 18 May 2024 22:14:49 +0000 Manifest this update: Sat 18 May 2024 22:14:48 +0000 Manifest next update: Sat 25 May 2024 22:14:48 +0000 Files and hashes: 1: akoHTuW-fzuoULO6IUKWtlsaLa0.crl (hash: XV+En/f5LRdC8et6kfEnpLhVPaCtgIg+3c9+AnLVazE=) 2: 531D1196CEA011EAB60D4C55C4F9AE02.roa (hash: eVQO15EKQreoGfOLA2RBp0D6DCWgOVTiQ1/nBPswX4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1947 (0x79b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Validity Not Before: May 18 22:14:48 2024 GMT Not After : May 25 22:14:48 2024 GMT Subject: CN=66492859-104e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ab:b5:ce:da:90:e8:37:15:48:26:aa:a4:7f: 6f:35:5f:96:05:7f:76:5c:5e:8d:a4:56:01:7e:67: 19:5f:66:b0:6f:0d:5f:d2:3f:6b:ea:a3:89:a3:37: 9a:87:4c:26:3d:dc:bd:75:ee:07:59:70:18:11:b5: 97:64:4a:ca:2b:19:7d:ab:90:b2:83:26:23:09:32: 72:6c:9e:c5:f6:f2:1e:fd:88:f0:e8:16:ff:00:92: f2:7a:11:0d:55:71:0c:45:a0:3f:0d:e8:df:dc:f5: 85:70:ea:4b:0e:2d:c5:8b:06:0a:48:e3:b0:1a:cf: 0c:5e:0d:81:d0:ad:6a:72:94:9e:88:4c:07:0d:38: e2:59:8e:7a:21:ed:7e:8d:67:0f:67:61:b1:95:6e: 6a:7d:b7:ca:f9:35:36:f5:a3:c8:7e:bd:14:2b:ea: ff:86:bf:03:b1:a7:10:14:99:ce:ee:bd:da:d1:e5: a1:75:b5:bb:70:af:89:46:7f:52:c0:02:81:b5:4b: cd:26:a3:bf:f7:90:8a:be:a0:26:73:af:b5:06:82: b6:5c:5a:60:7b:95:21:a6:84:26:d7:70:b4:8a:82: 5b:85:2c:d0:7e:21:bd:44:30:3f:3c:94:08:4e:87: 4a:b9:32:3c:79:eb:de:93:5f:1a:4f:f5:28:60:b9: 56:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DE:58:D6:E8:49:18:55:84:42:D4:3A:47:29:88:88:2C:5F:A9:23 X509v3 Authority Key Identifier: keyid:6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:22:79:3f:35:2a:27:43:38:f8:64:f4:9c:a7:94:51:77:ac: 61:56:53:11:e4:8c:41:49:ac:d3:51:81:3d:59:af:e0:f3:b4: cf:84:28:c4:aa:cb:3c:22:f3:fc:92:e8:2f:22:b9:e2:0d:42: a0:c2:d5:e9:5b:75:e6:fe:f3:74:d2:bb:7e:42:8d:5b:c2:d5: 11:21:36:27:ac:b0:13:18:a5:9d:f5:12:90:c5:e1:42:55:eb: 7c:2b:40:c0:f9:fb:7f:35:40:ac:cd:b2:3f:5c:7b:82:22:fc: c3:cd:33:f2:4f:fb:e9:fe:b5:c8:0d:ed:6e:5b:9b:cd:3e:51: bd:85:10:32:f8:ee:43:ce:8e:ca:56:bc:46:5a:a6:ee:ba:e2: 67:e9:7b:30:30:74:7a:b6:8a:c1:a8:81:f4:a4:8f:54:74:03: af:8f:08:68:28:5b:23:b4:74:5f:be:8c:43:bf:97:ec:83:47: fa:f2:96:41:aa:b7:7e:32:15:cd:29:a8:63:1b:0b:8a:88:cb: f5:e9:12:c3:a0:22:36:46:83:1c:6f:a0:9b:8d:67:77:97:4c: cf:c2:62:87:9b:2e:fb:1b:cf:97:28:c6:ff:25:af:53:ba:16: 64:0b:33:af:1c:78:fc:88:5c:c1:b3:a9:fa:61:38:85:4c:dd: ef:ea:dc:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFBNkExMTAvBgNVBAUTKDZBNEEwNzRFRTVCRTdGM0JBODUwQjNCQTIxNDI5NkI2 NUIxQTJEQUQwHhcNMjQwNTE4MjIxNDQ4WhcNMjQwNTI1MjIxNDQ4WjAYMRYwFAYD VQQDEw02NjQ5Mjg1OS0xMDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKu1ztqQ6DcVSCaqpH9vNV+WBX92XF6NpFYBfmcZX2awbw1f0j9r6qOJozea h0wmPdy9de4HWXAYEbWXZErKKxl9q5CygyYjCTJybJ7F9vIe/Yjw6Bb/AJLyehEN VXEMRaA/Dejf3PWFcOpLDi3FiwYKSOOwGs8MXg2B0K1qcpSeiEwHDTjiWY56Ie1+ jWcPZ2GxlW5qfbfK+TU29aPIfr0UK+r/hr8DsacQFJnO7r3a0eWhdbW7cK+JRn9S wAKBtUvNJqO/95CKvqAmc6+1BoK2XFpge5UhpoQm13C0ioJbhSzQfiG9RDA/PJQI TodKuTI8eevek18aT/UoYLlWtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXeWNbo SRhVhELUOkcpiIgsX6kjMB8GA1UdIwQYMBaAFGpKB07lvn87qFCzuiFClrZbGi2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUE2QS82MkJFMEFDNkNF OUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6dW9VTE82SVVLV3Rsc2FM YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Frb0hUdVctZnp1b1VMTzZJVUtXdGxzYUxhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUE2QS82MkJFMEFDNkNFOUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6 dW9VTE82SVVLV3Rsc2FMYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUInk/NSonQzj4ZPScp5RRd6xhVlMR5IxBSazTUYE9Wa/g87TPhCjE qss8IvP8kugvIrniDUKgwtXpW3Xm/vN00rt+Qo1bwtURITYnrLATGKWd9RKQxeFC Vet8K0DA+ft/NUCszbI/XHuCIvzDzTPyT/vp/rXIDe1uW5vNPlG9hRAy+O5Dzo7K VrxGWqbuuuJn6XswMHR6torBqIH0pI9UdAOvjwhoKFsjtHRfvoxDv5fsg0f68pZB qrd+MhXNKahjGwuKiMv16RLDoCI2RoMcb6CbjWd3l0zPwmKHmy77G8+XKMb/Ja9T uhZkCzOvHHj8iFzBs6n6YTiFTN3v6tzS -----END CERTIFICATE-----Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org